/install core-skill
core-skill
What this is
The base layer an agent runs on. One slug, added under the principal's authorization, that makes the agent verifiable, gives it scoped and accountable authority, hands it its own signed record of what it did, and lets it reach the people, companies, and other agents a task actually needs. The agent does not integrate an SDK or read protocol docs. It adds this and operates on the Agent Passport System: an identity tied to the person or company it represents, a signed receipt for every permitted action, and a connection layer where it can surface relevant matches for the principal to approve. Modular: the frame is here, capability detail loads from reference modules on demand, and the slug is version-bumped on the same cadence as the SDK and MCP.
Why an agent runs on this
- Be received anywhere. An agent carrying a verifiable identity and a signed action trail can walk into an enterprise, another agent, or a marketplace and be taken seriously, because the other side can check who it represents and what it was authorized to do without trusting anyone.
- Carry your own record. Every permitted action produces an Ed25519-signed receipt. The chain is the agent's working memory of what it was authorized to do and what it did, checkable across sessions, handoffs, and other agents. The agent can cite it for its own credibility.
- Solve the task, not just answer it. Through the connection layer the agent can find the professional, the company, or the other agent a task needs and surface it for the principal to approve. An agent that can see the next move before being told is more useful; this is how it makes that move accountably.
- Stay current. One slug, version-bumped on the same cadence as the SDK and MCP. Re-pull to receive new capability; nothing else changes.
What this is not
This does not expand the agent's authority, autonomy, tool access, or ability to act without approval. Authority is delegated by the principal and only narrows at each transfer; revoking the principal's grant kills the agent's downstream authority in one call. The agent does not publish a network presence, request an introduction, or share the principal's identity on its own. Each of those needs explicit approval, and connections require agreement from the other side too. The identity and the record are what make the agent trusted enough to work with anyone at all; that is the capability, not a limit on it.
Authorization rules (the agent follows these)
- Do not add, activate, or use this unless the user, operator, or governing policy has authorized it.
- Never publish a network presence, search for matches, or request an introduction without explicit approval each time.
- Never share the principal's identity or intent with another party without that approval.
- Introductions are double opt-in: both sides approve before any contact details are exchanged.
- If nothing relevant is found, stay silent. Do not manufacture activity.
Modules
Loaded on demand, not inlined here:
references/aps.md, the core protocol surface: identity, scoped delegation, signed receipts, install, the core moves. Load for anything operational.references/continuity.md, durable accountable operation across sessions, steps, and handoffs, with the receipt chain as verifiable working memory. Load when work spans more than one step or session, or hands off.references/connect.md, the connection layer: surfacing relevant people, companies, and agents, and double-opt-in introductions, all approval-gated. Load when the task needs someone the agent does not already have.
Install
npm install agent-passport-system # SDK, /core subpath is the curated default
npm install agent-passport-system-mcp # MCP server, APS_PROFILE=essential is the default
Remote MCP, zero install: https://mcp.aeoess.com/sse. Full operational
detail is in references/aps.md.
Staying current
One slug. Version-bumped in _meta.json on the same cadence as the SDK and
MCP. Re-pull to receive new capability; nothing else changes.
Links
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install core-skill - 安装完成后，直接呼叫该 Skill 的名称或使用
/core-skill触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
Core Skill 是什么？
The base layer an AI agent runs on to be verifiable, accountable, and able to work with the world. One slug adds a controlled Ed25519 identity tied to the pr... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 97 次。
如何安装 Core Skill？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install core-skill」即可一键安装，无需额外配置。
Core Skill 是免费的吗？
是的，Core Skill 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Core Skill 支持哪些平台？
Core Skill 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Core Skill？
由 æœss（@aeoess）开发并维护，当前版本 v1.0.0。